Route Origin Authorization

$ rpki-client -vvf ca.rg.net/rpki/RGnet-OU/ovsCA/jA9j1p3O7m08IY9xTbpLKY5C_sw.roa
File:                     jA9j1p3O7m08IY9xTbpLKY5C_sw.roa (raw, json)
Hash identifier:          /QQDOa4ucikM0quiqzMCqFWdG+WdLobDhpA3xjDRzNA=
Subject key identifier:   8C:0F:63:D6:9D:CE:EE:6D:3C:21:8F:71:4D:BA:4B:29:8E:42:FE:CC
Certificate issuer:       /CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
Certificate serial:       491D
Authority key identifier: 58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer
Subject info access:      rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/jA9j1p3O7m08IY9xTbpLKY5C_sw.roa
Signing time:             Thu 02 Jun 2022 00:30:09 +0000
ROA not before:           Thu 02 Jun 2022 00:30:09 +0000
ROA not after:            Sat 01 Apr 2023 22:21:14 +0000
asID:                     47065
IP address blocks:        147.28.2.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18717 (0x491d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58C7F79267AF74BA7D2FCC2562652C35B5E13EB1
        Validity
            Not Before: Jun  2 00:30:09 2022 GMT
            Not After : Apr  1 22:21:14 2023 GMT
        Subject: CN=8C0F63D69DCEEE6D3C218F714DBA4B298E42FECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:2d:20:53:ba:d7:41:51:5d:b0:53:be:4b:1c:
                    e4:cd:7e:cf:8f:f3:a8:5d:40:10:d6:88:9c:69:5e:
                    02:47:ef:82:d9:1e:26:90:17:13:3a:e5:50:a3:49:
                    b8:ec:4c:37:6b:00:f3:8b:72:a7:d3:70:28:ad:f3:
                    48:2a:6f:a7:e6:28:c5:d0:68:c8:20:d0:89:29:dd:
                    2c:9f:63:75:8e:a6:c4:07:50:b7:23:ec:cb:5d:aa:
                    73:d7:01:f7:48:07:75:35:d5:b1:8c:47:19:9e:11:
                    3c:91:b5:57:06:d2:1f:cf:54:4d:e6:63:6b:88:fe:
                    54:37:2d:13:37:7e:73:e5:57:85:75:1c:5f:4c:f8:
                    86:5d:ec:ba:d5:be:4b:93:df:29:0e:f0:ad:25:11:
                    d7:11:02:f8:b5:78:9e:e9:69:eb:63:2f:ce:a7:48:
                    de:7f:50:c0:9d:a2:7d:49:29:f0:41:a2:11:48:41:
                    5a:da:4a:a1:7b:ad:29:4c:2f:54:86:8f:ff:92:ca:
                    3a:47:a7:e0:e8:7b:7e:88:42:84:b5:98:40:14:1b:
                    13:73:54:9f:18:25:b4:24:1f:88:ac:e4:78:c3:d7:
                    7b:62:28:cb:99:0b:77:d0:23:e4:64:a6:a2:ed:e7:
                    84:15:b3:fb:b2:55:89:89:75:37:74:e5:fc:88:a4:
                    d8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:0F:63:D6:9D:CE:EE:6D:3C:21:8F:71:4D:BA:4B:29:8E:42:FE:CC
            X509v3 Authority Key Identifier:
                keyid:58:C7:F7:92:67:AF:74:BA:7D:2F:CC:25:62:65:2C:35:B5:E1:3E:B1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/WMf3kmevdLp9L8wlYmUsNbXhPrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/WMf3kmevdLp9L8wlYmUsNbXhPrE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://ca.rg.net/rpki/RGnet-OU/ovsCA/jA9j1p3O7m08IY9xTbpLKY5C_sw.roa
                RPKI Notify - URI:https://ca.rg.net/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.28.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:6a:d4:e1:9b:b6:be:c9:af:a8:f1:95:8c:fd:97:52:4f:74:
         19:1a:a8:a9:f9:b3:db:4a:0e:3e:77:e1:5f:39:04:f7:f0:83:
         22:9c:82:cb:7e:6b:b1:05:31:9b:2a:e6:24:0a:85:fa:f9:f5:
         3a:fe:87:08:2e:b7:3d:33:bb:cc:28:70:4e:11:71:90:e7:4d:
         5a:74:54:9e:de:78:57:60:8d:56:8d:90:39:ee:e0:6f:ea:f5:
         a7:63:80:85:26:e9:90:35:3b:78:e6:67:2d:e0:40:af:d3:a5:
         4a:a0:38:11:a1:5c:93:24:b9:09:f7:fd:1a:82:9d:da:1d:c5:
         d5:c2:31:08:40:3d:5a:7c:d5:9b:e8:60:10:06:1a:9f:5a:29:
         ef:8c:6d:41:b3:92:50:82:5b:85:8a:b1:be:31:3a:96:75:57:
         32:c2:94:da:af:83:b5:0d:13:c5:f5:2a:f4:74:48:b8:e4:d8:
         8f:f9:38:61:73:8b:84:07:1e:6b:f9:f0:88:47:04:f5:88:35:
         3c:79:96:3e:d5:1a:77:b0:9c:f6:65:8a:19:ea:50:db:b0:81:
         69:5b:67:7e:49:1c:e8:9b:02:59:51:c3:09:29:86:26:d5:1d:
         d1:c0:ce:b5:1c:80:75:30:59:e5:1b:f3:ca:e1:ba:da:2d:9d:
         8d:50:08:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----